|
World Rally 2 ?
#276712 - 02/20/12 10:42 PM
|
|
|
|
|
| FMecha |
|
MAME's (Armchair) Motorsports Consultant
|
|
|
|
|
|
Reged: 01/18/09
|
|
Posts: 152
|
|
|
|
|
|
Send PM
|
|
|
Re: World Rally 2 ?
[Re: kevenz]
#276790 - 02/21/12 05:10 PM
|
|
|
There's a unsolved bug that, if you crash, you are sent to nowhere. That, and the battery issue you mentioned, made the game GNW.
|
|
|
|
Re: World Rally 2 ?
[Re: FMecha]
#276793 - 02/21/12 05:13 PM
|
|
|
> There's a unsolved bug that, if you crash, you are sent to nowhere. That, and the
> battery issue you mentioned, made the game GNW.
As far as I'm aware, both of these issues are caused by the missing dallas ds5002 MCU data, which is destroyed when the suicide battery dies. The only way to get said data restored is to send the pcb back to Gaelco (and yes, they still repair these pcbs afaik).
LN
|
"When life gives you zombies... *CHA-CHIK!* ...you make zombie-ade!"
|
|
|
|
I wonder what that decapping guy would charge to read data from a DS5002FP (or if he even has the abillity to do so)
|
|
|
|
Re: World Rally 2 ?
[Re: jonwil]
#276800 - 02/21/12 06:08 PM
|
|
|
> I wonder what that decapping guy would charge to read data from a DS5002FP (or if he
> even has the abillity to do so)
Reading/bruteforcing a DS5002 is a huge mess, not for the faint of heart; read Markus Kuhn's papers about it.
https://www.cl.cam.ac.uk/~mgk25/kuhn-da.pdf
https://www.cl.cam.ac.uk/~mgk25/tamper.pdf
EDIT: Theoretically one could dump the encrypted sram data outside the ds5002 and try to crack the 24? bit key that is used to encrypt the address and data of every byte in the rom. The 24? bit key is NOT dumpable directly, in fact every time you program data into a ds5002 (it has a little intelhex-decoder rom inside to do this) it generates a new random key without operator intervention. It uses DES-like encryption according to kuhn, which probably means a 4-round fiestel network scheme like cps2 and the later naomi stuff use. Andreas and Nicola could maybe crack it, assuming we had a 'blank' ds5002 (technically all ds5002s are blank unless they have a battery attached, no flash inside) to program test data into and repeatedly dump the encrypted result.
LN
Edited by Lord Nightmare (02/21/12 06:56 PM)
|
"When life gives you zombies... *CHA-CHIK!* ...you make zombie-ade!"
|
|
Index 
Threaded 
World Rally 2 ?
Reply
[Re: 